Project Manager/ Management Consultant

Group level Information & IT Risk Management for a large bank

• Development and implementation of a top-down risk management methodology for the group
• Analysis of cyber security risks/trends (ENISA report, SANS20, etc.)
• Analysis of audit findings/issues
• Identification of project and operational risks
• Conducting senior management and BISO workshops for risk assessment
• Analysis of SANS20 controls and mapping of projects and risks to manage relevant initiatives/programs and projects
• Evaluation and mapping of initiatives and programs for risk reduction
• Setting up processes for analysis and updates of the information risk portfolio
• Establishment of information & IT risk reporting for the bank-wide committees

Project management for "Implementation of a group-wide payment transaction platform" based on SAP/Serrala at an insurance/building society

• Program planning and control
• Crisis management to take over the program, including transition according to the new plan
• Overall responsibility for the business case and its updates
• Stakeholder management, especially audit support and external auditors
• Release planning and requirements management
• Preparation and moderation of steering committees at board level
• Go-live preparations and cutover management
• Coordination of subproject managers
• Management of the architecture team (enterprise architecture, solution architecture)
• Management of test managers, management of the PMO team
• Conflict management in the project
• Resource planning and management (business case and clarity)
• Coordination of project changes with stakeholders and portfolio management
• Involvement of the line organization regarding know-how transfer, preparation of production launches, and support of provider management (Serrala and SAP)

Multi-project management "IT Security" at a development bank

• Setting up projects (scoping, staffing, dependencies, milestones, etc.)
• Project lead for data leakage prevention (DLP)
• Project lead for advanced malware protection (AMP)
• Project lead for intrusion detection/protection (IDS/IPS)
• Alignment of frameworks and ambition levels (e.g., for DLP and AMP) considering regulatory requirements from banking supervision, BSI, etc.
• Moderation of management workshops
• Milestone planning and management of dependencies and resource conflicts
• Tracking and consulting the projects to achieve the project results
• Setting up and conducting portfolio KPI reporting
• Alignment of evidence for project documentation
• Consulting the projects in the portfolio, especially network segregation
• Interface management for data protection
• Consulting and tracking for handing over project results to operations
• Preparation of results and alignment with audit

Multi-project management of "Integrated Risk Management" at an insurance company (2nd LoD)

• Setting up projects in the 2nd LoD portfolio (scoping, dependencies, milestones, etc.)
• Project lead for business continuity and IT service continuity management (BCM and ITSCM)
• Project lead for implementing a new information security incident management process
• Project lead for individual data processing (IDP) - inventory, compliance model, scanning
• Project lead for data leakage prevention (DLP) solution (MS Purview) – processes and technology
• Preparing and conducting senior management project review workshops
• Planning milestones and managing dependencies and resource conflicts
• Aligning evidence with internal audit and external auditors
• Advising and tracking the handover of project results to the line/operations
• Ongoing integration of DORA requirements into projects and planning the roadmap for 2024